Fedora 22 update security

[Josh Boyer]

On Wed, May 13, 2015 at 9:07 AM, Matthew Miller
<mattdm at fedoraproject.org> wrote:
> On Wed, May 13, 2015 at 07:49:34AM -0500, Michael Catanzaro wrote:
>> Actually, sorry, Matthew and I were wrong. We do allow unprivileged
>> users to run software updates (provided all of the updates are
>> cryptographically signed by Fedora). You can configure this behavior
>> manually by creating a file in /etc/polkit-1/rules.d with the following
>> contents (untested, should work):
>
> Huh. Last time this came up in FESCo, I thought the decision was to
> keep the policy as it had been (passwordless updates for admin users
> only).

Yes, I agree.  We really need to change it back to that if Software
(or anything else) is not in compliance.

josh